Legal
Partner Privacy Notice
How Propel handles the personal data of the companies that apply to its partner program, of the people who work for its partners and of the prospects partners register.
On this page
Effective date: 26 October 2026 · Version 1.1
This notice explains how CLV LABS SL (“Propel”, “we”) processes personal data in connection with the Propel partner program: the people who apply to it on propeltech.io/partners, the people who work for a partner and use its portal, and the people whose details a partner gives us. It complements our Privacy Policy, which covers everything else, including the Propel account each partner member signs in with.
1. Who we are
The controller is CLV LABS SL, Calle Guerau de Liost 8, 08017 Barcelona, Spain, tax ID (CIF/NIF) B05632997. Privacy matters are handled at team@clvlabs.tech. You may also lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.
2. What we process
- Your application: your company’s name, tax ID, country and website; your name, work email and phone; the kind of partnership you choose; what you tell us about your work, clients, sectors and tools; how you heard of us; your language; and when you accepted the program terms and this notice. The form runs an anti-bot check (Cloudflare Turnstile), and we limit how many applications one address can send.
- The partnership: the partner’s name, legal name, tax ID, country, contact email, track, tier, referral code and number of certified people; who works for it (the name and email of their Propel account, and their role); and the partner’s own workspaces, which never earn a commission and which are not deleted automatically, after a trial or a paid plan ends, while their owner is a member.
- What the program records: the workspaces credited to the partner (name, plan, number of users, subscription status and the amounts paid for Propel), its commissions and payouts, and the deals it registers.
- Prospects a partner registers: the company’s name and domain and, if the partner gives them, a contact’s name and email and the partner’s notes. We use them only to protect the registration and to recognise the company when it signs up. The partner must be entitled to share them with us.
- Payment and tax details, before the first payout: legal name, tax ID or VAT number, fiscal address and bank account (IBAN, stored encrypted); the invoices we issue on the partner’s behalf (self-billing); and the result of checking an EU VAT number in the European Commission’s VIES system.
- The public directory, only if the partner turns it on: its name, logo, country, tier badge, services, languages, sectors and website. A visitor who writes to a partner through the directory’s form gives us their name, email and message, which we pass on to that partner; we then keep only that a message was sent, and when.
- Certification: the course progress, exam attempts and results, and certification dates of each person who takes the portal’s course.
- Communications: the program’s emails (application received, welcome, payouts, a new client credited) and what you write to us.
- Records of what we do: the changes our team makes to a partner in our console (who, what and when) are kept in our security log.
A partner’s demonstration workspace is a Propel workspace like any other: its content is covered by the Privacy Policy and the Terms of Service.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Assessing an application | Steps taken at your request before entering into a contract, Art. 6(1)(b) |
| Running the partnership: crediting workspaces, commissions, payouts, the portal, registrations, certification and the program’s emails | Performance of the contract with the partner, Art. 6(1)(b) |
| Issuing self-billed invoices, applying VAT, keeping the books and reporting to the tax authority | Legal obligation, Art. 6(1)(c) |
| Checking an EU VAT number in VIES | Legal obligation, Art. 6(1)(c) |
| Keeping a prospect’s registration and recognising the company at sign-up | Legitimate interests, Art. 6(1)(f), ours and the partner’s, in a clear record of which partner brought a client |
| The public directory | The partner’s consent, Art. 6(1)(a), given by turning it on; it can be turned off at any time |
| Passing a directory visitor’s message to the partner | The visitor’s request, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f) |
| Preventing abuse (anti-bot checks, the review of a client that shares a partner member’s email domain) and keeping a security log | Legitimate interests, Art. 6(1)(f) |
| Establishing, exercising or defending legal claims | Legitimate interests, Art. 6(1)(f) |
Where we rely on legitimate interests you may object at any time, and where we rely on consent you may withdraw it at any time, without affecting what was done before.
4. Who sees it
- Propel’s team, in our operators’ console.
- The partner’s members, in its portal: its clients, commissions, payouts and registrations.
- A credited client: its owners and admins see which partner brought their workspace, in Settings → Billing.
- Anyone, for what the directory shows, if the partner turns it on.
- Our providers that host the Service and deliver its email, listed in section 7 of the Privacy Policy; Cloudflare, for the anti-bot check; our bank, to pay; and the Spanish tax authority, as tax law requires.
We do not sell personal data. The data is hosted in the European Union; any transfer outside it follows section 10 of the Privacy Policy.
5. How long we keep it
- An application: for as long as we need to assess it; if it leads to a partnership, for the life of the partnership.
- The partnership and what the program records: for the life of the partnership, then for as long as legal claims may arise from it.
- Invoices, commissions and payouts, with the payment and tax details they carry: for the period Spanish tax and commercial law requires (generally up to six years).
- The directory listing: until the partner turns it off or the partnership ends.
- Certification results: for the life of the partnership.
- Records of what we do: the changes our team makes to a partner in our console, 12 months.
6. Your rights
You can ask for access to your data, its rectification or erasure, the restriction of its processing or its portability, object to processing based on legitimate interests, and withdraw a consent, by writing to team@clvlabs.tech. We answer within one month. Data the law requires us to keep, such as invoices, cannot be erased before that period ends. You can also lodge a complaint with the AEPD (www.aepd.es). Section 13 of the Privacy Policy gives the detail.
7. Changes to this notice
We publish any change on this page with its new version and date, and tell active partners by email of any change that matters to them.
Published and in force as of the date above, alongside the partner program terms 1.0.